An organization uses a hardware security module (HSM) to store encryption keys for its production databases. The security team wants to ensure that keys are available if the primary HSM fails, but also wants to prevent unauthorized key recovery. Which practice should the administrator implement?

Back up the HSM keys to a secure offsite location using a key escrow service

Store a copy of the keys on a network share with read-only permissions

Print the keys and store them in a safe

Do not back up the keys to prevent theft

A database administrator is setting up encryption for a new application that stores customer payment information. The application will be hosted on a single server, and the administrator wants to protect the data at rest with minimal performance impact. Which encryption approach should the administrator choose?

Enable Transparent Data Encryption (TDE) on the database

Store the database on an encrypted USB drive

Encrypt each field individually using application-level encryption

Use a VPN to encrypt traffic between the application and database

What is the most effective way to ensure data on an SSD is securely deleted before disposing of the drive?

Using the drive's built-in secure erase command

Overwriting the drive with zeros once

Deleting all files and folders manually

An organization must implement a retention policy for customer records. Which action is a key step in implementing this policy?

Store all customer records indefinitely to avoid compliance issues

Delete all customer records immediately after collection

Define retention periods for each data type based on legal and business requirements

Encrypt all customer records with the same key

CompTIAServer+

Domain 3Objective 1

Data Security SK0-005 Practice Questions (Page 4)

Part of the Security and disaster recovery domain, which accounts for 24% of the SK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

24%of the exam

Questions 16–20

16application · medium
An organization uses a hardware security module (HSM) to store encryption keys for its production databases. The security team wants to ensure that keys are available if the primary HSM fails, but also wants to prevent unauthorized key recovery. Which practice should the administrator implement?
Select an answer first
17application · medium
A database administrator is setting up encryption for a new application that stores customer payment information. The application will be hosted on a single server, and the administrator wants to protect the data at rest with minimal performance impact. Which encryption approach should the administrator choose?
Select an answer first
18foundation · easy
Which classification level is typically used for data that would cause significant harm if disclosed, such as customer financial records?
Select an answer first
19foundation · easy
What is the most effective way to ensure data on an SSD is securely deleted before disposing of the drive?
Select an answer first
20foundation · easy
An organization must implement a retention policy for customer records. Which action is a key step in implementing this policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SK0-005” is a trademark of its owner, used for identification only.

Data Security SK0-005 Practice Questions (Page 4)

Questions 16–20

An organization uses a hardware security module (HSM) to store encryption keys for its production databases. The security team wants to ensure that keys are available if the primary HSM fails, but also wants to prevent unauthorized key recovery. Which practice should the administrator implement?

Which classification level is typically used for data that would cause significant harm if disclosed, such as customer financial records?

What is the most effective way to ensure data on an SSD is securely deleted before disposing of the drive?

An organization must implement a retention policy for customer records. Which action is a key step in implementing this policy?

Keep studying — Security and disaster recovery